TRUMPF: Remote support uses an outdated encryption algorithm
The TRUMPF remote support infrastructure selects an outdated encryption algorithm when setting up communication channels for machines. This cannot be prevented for old machines. For most machines it is possible to change the encryption settings.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-2183US | high7.5OT hoch | Exploit | ||
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which mak… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- Kein Fix geplantTelepresence Box <7.0.0
Machines using a Telepresence Box 6.x and older can't use secure encryption. All customers still connecting to TRUMPF with such a device will be identified by TRUMPF and contacted with further information. It is possible to order a new Telepresence Box via your sales representative. In such a case, please contact the TRUMPF Service for installation.
- BehobenTelepresence Box 7.0.0<8.0.0 older than 08.08.2025
Since August 8st, 2025, an automated configuration update is available for TRUMPF machines with a Telepresence Box 7.0.0 and newer. It will automatically be applied when activating a remote session from the machine. It is not necessary for a TRUMPF technician to join the session.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan